FEDORA-2023-d4ebe53978
Packages in this update:
vim-9.0.1407-1.fc37
Update description:
The newest upstream commit
Security fixes for CVE-2023-1175, CVE-2023-1170, CVE-2023-1264.
vim-9.0.1407-1.fc37
The newest upstream commit
Security fixes for CVE-2023-1175, CVE-2023-1170, CVE-2023-1264.
The critical vulnerability allows remote code execution and was assigned a CVSS v3.1 score of 9.8
vim-9.0.1407-1.fc38
Security fixes for CVE-2023-1175, CVE-2023-1170, CVE-2023-1264.
The operation seized four servers, 7TB of data and 1909.4 Bitcoins (roughly $47.3m)
The Chancellor of the Duchy of Lancaster, Oliver Dowden, confirmed the plans earlier today
Unauth. Stored Cross-Site Scripting (XSS) vulnerability in WPMU DEV Forminator – Contact Form, Payment Form & Custom Form Builder plugin <= 1.14.11 versions.
An issue found in UwAmp v.1.1, 1.2, 1.3, 2.0, 2.1, 2.2, 2.2.1, 3.0.0, 3.0.1, 3.0.2 allows a remote attacker to execute arbitrary code via a crafted DLL.
An issue found in DepositGame v.1.0 allows an attacker to gain sensitive information via the GetBonusWithdraw and withdraw functions.
Cross Site Scripting vulnerability found in Markdown Edit allows a remote attacker to execute arbitrary code via the edit parameter of the webpage.
Yebo Cao discovered that Python incorrectly handled certain URLs.
An attacker could possibly use this issue to bypass blocklisting
methods by supplying a URL that starts with blank characters.